Confusion Configuring

[Dr. Matthias St. Pierre]

Hal,

> But when I run
>   ./apps/openssl version -d
> it says:
>   OPENSSLDIR: "/usr/local/ssl"
> I was expecting /etc/pki/tls from the Configure line above.
>
> What am I missing?  How do I tell it where to find the default certificates?

It is very likely that your binary is actually loading the system's shared libraries instead of
the ones you just compiled. You can verify whether this using the `ldd` command, see below.

There is a shared library wrapper called `shlib_wrap.sh` which can be used to run
the compiled application correctly without installing it:

## incorrect (without wrapper)
msp at msppc:~/src/openssl-1.1.1$ apps/openssl version -d
OPENSSLDIR: "/etc/ssl"

## correct (using the wrapper)
msp at msppc:~/src/openssl-1.1.1$ util/shlib_wrap.sh apps/openssl version -d
OPENSSLDIR: "/opt/openssl-1.1.1-dev/ssl"

HTH,

Matthias




## ldd output without wrapper

msp at msppc:~/src/openssl-1.1.1$ ldd apps/openssl
        linux-vdso.so.1 (0x00007fff05b81000)
        libssl.so.1.1 => /usr/lib64/libssl.so.1.1 (0x00007f6e46ade000)
        libcrypto.so.1.1 => /usr/lib64/libcrypto.so.1.1 (0x00007f6e46820000)
        libdl.so.2 => /lib64/libdl.so.2 (0x00007f6e4681a000)
        libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f6e467fa000)
        libc.so.6 => /lib64/libc.so.6 (0x00007f6e46641000)
        /lib64/ld-linux-x86-64.so.2 (0x00007f6e46c5d000)

## ldd output using the wrapper

msp at msppc:~/src/openssl-1.1.1$ util/shlib_wrap.sh ldd apps/openssl
        linux-vdso.so.1 (0x00007ffd2032e000)
        libssl.so.1.1 => util/../libssl.so.1.1 (0x00007f4a34aeb000)
        libcrypto.so.1.1 => util/../libcrypto.so.1.1 (0x00007f4a347a2000)
        libdl.so.2 => /lib64/libdl.so.2 (0x00007f4a34785000)
        libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f4a34765000)
        libc.so.6 => /lib64/libc.so.6 (0x00007f4a345ac000)
        /lib64/ld-linux-x86-64.so.2 (0x00007f4a34c78000)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 7448 bytes
Desc: not available
URL: <https://mta.openssl.org/pipermail/openssl-users/attachments/20211218/65d9f041/attachment.bin>